DevSecOps
Hacking Your Auditor
No, not that kind of hacking, give me a little credit... Recently I was having a conversation with a consulting friend about DevOps, and he found himself in a bit of a ...
Logging Wins for Devops and Security
Its always great when companies can invest in tools that serve multiple groups and purposes. Ensuring proper setup and use of logs is one toolset that can serve both DevOps and Security ...
Organizational Dysfunction: The original vulnerability
During your teenage years, you may have figured out a way to get a ‘yes’ from your parents by playing off of the responsibility and knowledge gap between them…walking up to your ...
What is Security Policy Orchestration and Why Should DevOps Teams Care?
After attending the DevOps day I wrote about in my last post, I wanted to take a minute to explain exactly what Security Policy Orchestration actually is so we can begin to ...
DevOps and Security Are Compatible
When I speak with information security organizations faced with the prospect of moving to DevOps, one of the most common fears I hear is that this transition will degrade security of infrastructure ...
It’s the Outbound Stupid!
As nice as the word "Egress" may sound, I like "Outbound" better. Outbound is hardcore firewalling for the traffic that was initiated on the "trusted" side of the firewall, and is destined OUT to ...
Security Policies For DevOps 101
A while back I was talking with some friends about how to ensure security inside a devops environment. The simple first thought was that no where does DevOps say to do away ...
Bootstrapping Chef (or Whatever) for Autoscaled EC2 Instances
I realize it is traditional to start writing a new blog with some background and a deep introspection as to the author's personal motivation for writing said blog, but I've never been ...
Why Baking Security Into the DevOps Framework is Vital to Its Success
I attended my first official DevOps conference in Israel in September 2013. But I was initially introduced to DevOps by my customers – firewall and network managers who, through their efforts to ...
DevOps – A wake up call to security vendors
DevOps is changing the way IT works. Through a collaboration of development and IT teams, organizations can achieve tremendous scale at increased speed to deploy and maintain critical applications and infrastructure. The ...

